Cybersecurity Lead: SIEM, IR & Compliance for Gov Contracts

Patriot Contract Services; Houston (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401(k) retirement plan

Paid time off

Job summary

Patriot Maritime seeks an experienced Cybersecurity Analyst/Engineer to build and mature our information security program. The role focuses on monitoring with Microsoft Sentinel, Endpoint security, and policy enforcement across hybrid Azure/on-prem environments.

You will drive risk reduction, ensure audit readiness, and align with NIST ISO 27001 and CMMC requirements. The ideal candidate has hands-on security operations experience in a government contracting context, strong communication skills

Qualifications

• 3–5+ years of hands-on experience in cybersecurity or information security engineering; mid-to-senior level background required.
• Demonstrated experience in a federal government contractor, defense, or similarly regulated environment strongly preferred.
• Prior experience with CMMC framework requirements is required.
• Hands-on proficiency with the Microsoft security stack: Sentinel (SIEM/SOAR), Defender for Endpoint, Defender for Cloud, Entra ID, and Conditional Access
• Working knowledge of Azure security services, cloud posture management (CSPM), and hybrid infrastructure environments
• Working knowledge of NIST CSF, ISO 27001, DFARS 252.204-7012, and CMMC 2.0 framework requirements
• Ability to maintain audit-ready documentation, evidence libraries, and control mapping artifacts
• Strong written and oral communication skills; ability to translate technical risk into business-level language for executive audiences
• Demonstrated experience identifying, investigating, and mitigating cyber-enabled fraud, including BEC, invoice fraud, and payment diversion schemes

Responsibilities

• Security Operations & Monitoring: Own and operate security monitoring using Microsoft Sentinel or equivalent SIEM; tune detection rules, triage alerts, and lead response to security events.
• Vulnerability Management & Remediation: Conduct regular vulnerability scanning across endpoints, servers, and cloud resources; manage a remediation pipeline in coordination with IT and third-party vendors.
• Incident Response & Business Continuity: Develop, maintain, and test IR and DR plans; lead tabletop exercises with IT and operations stakeholders.
• Compliance & ISO 27001/NIST/CMMC Administration: Administer ISO 27001 control environment; maintain SOA, evidence library, and audit trail; support DFARS/CMMC readiness.
• Identity, Access & Endpoint Controls: Review and enforce Conditional Access policies, MFA enrollment, and privileged access controls; ensure Entra ID configurations align with least-privilege principles.
• Vendor Risk & Security Awareness: Conduct third-party and vendor risk assessments; deliver security awareness training and phishing simulations; address BEC risks.
• Cyber Fraud Monitoring & Prevention: Monitor email, financial, and payroll systems for fraud indicators; coordinate with Finance/HR; maintain SPF/DKIM/DMARC and mailflow rules.
• Reporting & Executive Communication: Produce recurring executive security dashboards and risk metrics; translate risk for contracts and leadership reviews.
• Patriot offers a competitive compensation package commensurate with experience, including comprehensive health benefits, life/disability coverage, 401(k) with employer contribution, and paid time off.

Skills

Hands-on cybersecurity experience

Executive communication

Audit-ready documentation

Tools

Microsoft Sentinel

Defender for Endpoint

Defender for Cloud

Entra ID

Intune/MEM

Nessus

Qualys

Job description

Patriot Maritime seeks an experienced Cybersecurity Analyst/Engineer to build and mature our information security program. The role focuses on monitoring with Microsoft Sentinel, Endpoint security, and policy enforcement across hybrid Azure/on-prem environments.

You will drive risk reduction, ensure audit readiness, and align with NIST ISO 27001 and CMMC requirements. The ideal candidate has hands-on security operations experience in a government contracting context, strong communication skills